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WHAT IS CLAIMED IS : 

1 . A computer-readable medium having computer- 
execVtable instructions, comprising: 

receiving a first transaction request in association with 
a first certificate issued by a certificate authority; 

communicating with a status authority to query for 
current status information on the first certificate; and 

receiving^ second certificate from the status authority 
indicating the current status of the first certificate. 



2. The computer-readable medium of claim 1, wherein the 
certificate authority comprises the status authority. 



3. The computer-readable medium of claim 1, wherein the 
15 status authority comprises an agent authorized to act on 
behalf of the certificate autlibrity. 



4. The computer-readable medium of claim 1, wherein the 
transaction request is received from\^ end entity, and having 
20 further computer executable instructions^comprising, 

transmitting information including the second certificate to 
the end entity. 
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5. The computer-readable medium of claim 4, wherein the 
information including the second certificate is transmitted to 
the end entity along with a response to the transaction 
request: . 

5 \ 

6. \ The computer-readable medium of claim 4, wherein the 
information including the second certificate is transmitted to 
the end entity along with at least one digital signature. 

10 7. The\computer-readable medium of claim 1 having 

further computer executable instructions comprising, 
transmitting theXfirst certificate and the second certificate 
to a remote party ^along with a second transaction request. 



15 8. The computer-readable medium of claim 7 having 

further computer executable instructions comprising, receiving 
a third certificate f roim the remote party. 



9. The computer-readable medium of claim 8, wherein 
20 information of the third certificate is communicated with a 
response to the second transaction. 




10. The computer-readable medium of claim 1, wherein a 
third certificate is received withXthe transaction request and 



t\e first certificate, the third certificate comprising a 
record of a response to a status request of the first 
cert\ficate at a particular time. 
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11. \ The computer-readable medium of claim 10 having 
further computer executable instructions comprising, 
transmitting \the first certificate, the second certificate, 
and the third ^rtificate to a remote party along with another 
transaction request. 

12 . The computeV- readable medium of claim 11 having 
further computer executable instructions comprising, receiving 
information including a fourth certificate from the remote 
party indicating the current status of at least one of the 
first, second, and third certificates. 
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13. The computer-readable medium of claim 11, wherein 
the fourth certificate is communica^ted with a response to the 
other transaction . 

14. A computer- readable medium havi^ng computer- 
executable instructions, comprising; 

receiving a query from a relying party for current status 
information on a first certificate; and 
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issuing a data structure including a second certificate 
indicating the current status of the first certificate. 

15 A The computer-readable medium of claim 14, having 
further computer executable instructions comprising 
transmitting the data structure to the relying party. 



. 16. The computer-readable medium of claim 14, wherein 
the data structure comprises an extension designating the 
10 second certif icateXas being an indication of the current 
status of the first certificate. 
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17. The computer-readable medium of claim 14, wherein 
the data structure furtherx comprises policy information. 



18. The computer- readabl\^ medium of claim 17, wherein 
the data structure further indues information regarding 
evidence submitted to satisfy a policy of the relying party. 



20 19. The computer-readable medium^ of claim 14, wherein 

the data structure comprises policy-reMted information that 
qualifies the second certificate. 
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20. The computer-readable medi-um of claim 14, wherein 
the ^ata structure further comprises success or failure 
information regarding the second certificate . 



21 \ The computer- readable medium of claim 14, wherein 
the data \structure comprises information regarding a validity 
of\l 



period 



:he second certificate. 
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22. The\ computer-readable medium of claim 21, wherein 
the first certiNficate has a validity period associated 
therewith, and wnerein the information regarding the validity 
period of the secorid certificate specifies a validity period 
for the second certi\ficate that is shorter than the validity 
period for the first certificate. 




23. A method for performing electronic commerce. 



comprising, 

receiving, at a certificate authority, a first request 
for a certificate; 

verifying whether the certificate should be issued, and 
if so,, issuing the certificate; 

receiving a second request at\a status authority for 
status information about the certificate; and 
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^ssuing a reissue certificate including the status 
information . 

24. \ The method of claim 23 wherein the certificate 
5 authority comprises the status authority. 




25. TheVnethod of claim 23 wherein the status authority 
is a designatedX agent of the certificate authority. 



26. The method of claim 23 wherein the first request is 



provided by an end entity, 
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27. The method on claim 23 wherein the second request is 
provided by a relying parvty. 



28. The method of claim 23 wherein the first request is 
provided by an end entity that\ provides the certificate to a 
relying party, and wherein the second request is provided by 
the relying party. 

29. A method for performing electronic commerce, 
comprising: 

receiving a certificate at an end entity; 



providing the certificate to a relyinq party; and 
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receiving a receipt at the end entity from the relying 
pkrty, the receipt including status information about the 
certificate . 

30V The method of claim 29 further comprising, 
requestii^ the certificate from a certificate authority. 

31. Thk method of claim 29 wherein the status 
information isXprovided by a status authority. 



32. The method of claim 29 further comprising, 
requesting a certificate from a certificate authority, and 
wherein the status information is provided by the certificate 
authority. 



33. The method of claim 29 wherein the receipt includes 
evidence. 



34. The method of claim 33 wherein the evidence 
20 comprises policy information. 



35. A method for performing electronic commerce. 



15 



comprising. 
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\receiving a certificate with a request to perform a 
transaction; 

coinmuni eating with a status authority to request status 
informaqion about the certificate; 

receVving a reissue certificate including the status 
information in response to the request; and 

deciding whether to perform the transaction based on the 
status information . 

36. The metnod of claim 35 wherein the certificate is 
issued by a certifrcate authority. 

37. The method cxi claim 35 wherein the certificate 
authority further comprises the status authority such that the 
certificate and reissue certificate are issued by the 
certificate authority. 

38. The method of claim 35 wherein the request to 
perform a transaction is receive\\^rom an end entity, and 
further comprising returning a response to the end entity. 



39. The method of claim 35 wherein the response includes 
a receipt. \ 
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^40. The method of claim 35 wherein the receipt includes 
data associated with the status information. 

41. \The method of claim 35 wherein the certificate is 
issued by a certificate authority, and wherein the request to 
perform a transaction is received from an end entity, and 
further comprising returning a response to the end entity. 



42. A method for performing electronic commerce, 
comprising : 

requesting at aA end entity a certificate from a 
certificate authority; 

providing the certificate with a request for performance 
of a transaction; and 

receiving information a^ the end entity indicating 
whether the transaction was performed, the information 
provided by a status authority^and including the status of the 
certificate . 
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43. The method of claim 42 wherein the certificate 



authority comprises the status authority 



44. The method of claim 42 wherein the information 
received at the end entity includes a receipt. 
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A method for performing electronic commerce, 
comprisVng : 

requesting at an end entity a certificate from a 
certificate authority; 

providrng a request for performance of a transaction to a 
relying party \ the request including the certificated- 
receiving tshe request at the relying party, and 
communicating withv a status authority to determine the status 
of the certificated- 
receiving a reissue certificate from the status 



\ 



authority, the reissue certificate indicating the status of 
the certificate ; and 

communicating inf ormatj^n from the relying party to the 
end entity, the information indicating whether the transaction 
was performed and including the status of the certificate. 




46. A method for performing electronic commerce, 



comprising : 

receiving, at a second party, a request from a first 
party to accept a transaction and a first certificate 
referencing the transaction; 
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\ accepting the transaction at the second party and issuing 
a redeipt to the first party, the receipt including a second 
certif\Lcate as proof of acceptance of the transaction; 

sending, from the second party to a third party, the 
transaction, the first certificate and the second certificate 
to offer th^ transaction for sale; and 

receivingr a receipt at the second party from the third 
party includin^a third certificate as proof that the third 
party purchased the transaction . 

47. The methodVof claim 46 wherein the third party sends 
the transaction, the first certificate, the second certificate 
and the third certificate to a fourth party to attempt to 
resell the transaction. \ 

48. The method of claim 46 wherein the fourth party 
purchases the transaction and Vssues a receipt including a 
fourth certificate to the third Varty. 



i/y^. The method of claim 46 wherein the first 
certificate comprises evidence, and wherein the second party 
evaluates the evidence from the first party. 




^^\^. The method of claim ^ wherein the evidence includes 
at least one policy decision made by the first party. 
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The method of claim 46 wherein the first and second 
certificates comprise evidence, and wherein the third party 
evaluates ttjie evidence from the first party and the second 
party. 

The mathod of claim 5^ wherein the evidence includes 
at least one policy decision made by at least one of the first 
or second parties. 
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The method of claim 46 wherein the first, second and 
third certificates comprise evidence, and wherein the fourth 
party evaluates the evidence from the first party, the second 
party and the third party, 
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^Lj 5^. The method of claim wherein the evidence includes 
at least one policy decision made by at least one of the 
first, second or third parties. 



The method of claim 46 wherein each party evaluates 
each certificate provided thereto prior to issuing its 
respective receipt . 
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A computer -readable medium having stored thereon a 
datr^ structure, comprising: 

first field referencing a request for performing an 
electronic transaction; and 

a second field comprising a list of evidence accumulated 
from at least one recipient of the request. 



The computer-readable medium having stored thereon 

\ 

10 the data structurevof claim >5, wherein the first field 



comprises a responses, subject field. 



^0 5/7. The computer-readable medium having stored thereon 
the data structure of claim ^6 further comprising, a third 
15 field having response statusXinf ormation therein. 
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The computer-readable medium having stored thereon 
the data structure of claim 56 furcher comprising, a third 



field having response status information therein. 



The computer-readable medium having stored thereon 
the data structure of claim ^ further comprising, a third 



field having a validity period identified therein. 
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The computer-readable medium having stored thereon 
the\ data structure of claim ^ further comprising, a third 
field having certificate policy information therein. 

^Z^\ The computer-readable medium having stored thereon 
the data\.tructure of claim further comprising, a third 
field havina certificate policy information therein. 



A computer-readable medium having stored thereon a 
10 data structure, comprising, 

a first data fiN^d representing the current status of a 
first certificate; anc^ 

a second data f ield^esignating the present data 
structure as including st^us information regarding the first 
15 certificate. 
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The computer- readable\medium of claim wherein 
the data structure further compris^es a third data field 
providing an evidence list. 

The computer-readable medium claim wherein 
the data structure further comprises information regarding 



evidence submitted to satisfy a policy of uhe remote 
recipient . 
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i^he computer-readable medium of claim wherein 
the data struofe^re comprises policy-related information. 

J^l The compute^ readable medium of claim wherein 
the current status field ^indicates success or failure 
information . \^ 

The computer-readable medivuijf^^ claim wherein 
the data structure comprises information^ regarding a validity 
period. 
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